$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa File: bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa (raw, json) Hash identifier: a0lUWcsfl/GDXVy7nc5nhLxQpwWWJCr/s+mAVdSt0Vo= Subject key identifier: BE:77:32:2E:95:24:3C:C7:53:80:C8:E4:17:84:DB:2C:7E:5A:25:DC Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F432858497DA471C13DF677842F69A200 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 19318 IP address blocks: 68.168.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:71:c1:3d:f6:77:84:2f:69:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=8b15b53f-4315-4d20-911f-6f34eb38ced9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:3e:36:c3:c9:05:51:ab:16:b3:93:72:6a: a5:d9:88:b6:d5:c0:89:98:45:43:d1:3e:42:6a:5d: 16:f3:c3:6e:5b:71:c1:8c:9b:dd:87:9a:2e:8b:9d: 93:f5:dd:ee:06:80:76:5c:31:3b:d9:74:7c:10:93: 79:81:22:47:05:bd:65:44:72:4d:64:9e:a9:4b:66: 9f:26:1f:5f:3c:31:aa:8e:90:8f:aa:db:16:c8:8c: 5b:bc:d5:8a:ad:1a:54:3e:97:52:83:af:13:84:11: 66:e1:0e:42:58:c5:79:98:24:6a:68:0f:92:6f:77: 0d:c8:ac:23:23:1c:42:9e:4e:d7:0c:4b:d9:fd:33: 98:73:ee:68:18:18:0a:64:46:db:40:97:1a:07:e0: 57:d8:e4:27:7e:4c:ee:38:0a:9e:f8:c5:c9:2b:da: 98:87:31:15:f1:ca:86:f9:64:81:ec:f5:0b:f2:5e: 64:f6:97:45:0d:e3:79:c8:c6:33:68:c4:ed:34:a8: 9e:e7:41:d7:fd:ae:6e:27:87:1b:dc:c7:40:55:a6: 18:34:c6:cc:ee:db:e7:8b:96:3b:00:00:f8:e0:19: 24:1a:a4:1e:6e:84:3e:46:de:fe:c3:9e:83:ea:e1: c1:97:c1:74:10:e1:6f:41:33:02:06:b4:4d:ec:22: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:77:32:2E:95:24:3C:C7:53:80:C8:E4:17:84:DB:2C:7E:5A:25:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 68.168.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:17:78:9c:51:ab:a9:c9:0d:91:42:48:4c:44:d3:b3:e0:df: ec:b7:6d:02:a2:1e:73:9c:9c:95:32:10:37:0b:03:96:fa:b8: 0a:12:9e:35:a1:fd:de:fb:9b:a7:09:fc:e0:e9:a0:91:ea:f1: 2c:05:4f:32:0d:1d:12:f0:d4:04:32:0c:c5:b4:de:45:4b:a3: 77:50:30:4b:63:8e:e9:de:bf:33:27:a1:dc:c6:9f:b6:fd:f4: 79:68:92:58:fc:3e:88:e9:98:5a:a0:ac:5f:15:7d:d4:71:51: 82:23:d8:a8:7c:ed:d6:02:64:88:25:08:00:15:c4:51:f0:b0: 8d:74:39:ad:01:a4:35:f4:98:93:fc:56:a3:40:e9:c7:65:40: 45:73:1e:54:1d:c9:16:bc:2c:aa:a3:b2:77:d8:ed:04:94:72: 16:84:ca:ef:d9:d4:20:56:66:1b:a5:8e:93:3d:ef:e8:74:af: cf:22:df:47:26:74:de:f6:21:73:7d:dc:5b:32:17:bc:18:47: 9e:01:a1:fe:f4:5a:e1:44:55:d9:32:59:5c:0c:d2:20:21:f8: f4:44:52:19:fd:92:b4:59:aa:f4:32:91:02:0e:ec:80:c6:82: 59:37:b3:af:8e:00:d6:c4:79:0b:1a:4a:80:02:52:e0:5a:d2: ff:a8:da:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHHBPfZ3hC9pogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGIxNWI1M2YtNDMxNS00ZDIwLTkxMWYtNmYzNGViMzhjZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBY+NsPJBVGrFrOTcmql2Yi21cCJmEVD0T5C al0W88NuW3HBjJvdh5oui52T9d3uBoB2XDE72XR8EJN5gSJHBb1lRHJNZJ6pS2af Jh9fPDGqjpCPqtsWyIxbvNWKrRpUPpdSg68ThBFm4Q5CWMV5mCRqaA+Sb3cNyKwj IxxCnk7XDEvZ/TOYc+5oGBgKZEbbQJcaB+BX2OQnfkzuOAqe+MXJK9qYhzEV8cqG +WSB7PUL8l5k9pdFDeN5yMYzaMTtNKie50HX/a5uJ4cb3MdAVaYYNMbM7tvni5Y7 AAD44BkkGqQeboQ+Rt7+w56D6uHBl8F0EOFvQTMCBrRN7CLRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL53Mi6VJDzHU4DI5BeE2yx+WiXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvYmJjN2EyMGUtMmI2NC0z ZDU5LThjNTgtODY2ZGI1Y2RjOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKjVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8XeJxRq6nJDZFCSExE07Pg3+y3bQKiHnOcnJUyEDcLA5b6uAoSnjWh /d77m6cJ/ODpoJHq8SwFTzINHRLw1AQyDMW03kVLo3dQMEtjjunevzMnodzGn7b9 9Hloklj8PojpmFqgrF8VfdRxUYIj2Kh87dYCZIglCAAVxFHwsI10Oa0BpDX0mJP8 VqNA6cdlQEVzHlQdyRa8LKqjsnfY7QSUchaEyu/Z1CBWZhuljpM97+h0r88i30cm dN72IXN93FsyF7wYR54Bof70WuFEVdkyWVwM0iAh+PREUhn9krRZqvQykQIO7IDG glk3s6+OANbEeQsaSoACUuBa0v+o2sU= -----END CERTIFICATE-----Generated at Mon May 5 19:44:49 2025 by rpki-client